AMENDMENTS TO THE CLAIMS 

1 . (Currently Amended) A method comprising: 

* 

registering a first party and a second party with a database at a server, wherein the 
first party is registered as a party relying on a digital certificate of the 
second party; 

receiving a request to revoke the digital certificate of the second party after 
registering the first party; 

authenticating the request in accordance with a pre-defined authenticating policy 
associated with the digital certificate of the second party, and generating 
an authorization certificate by a revoker of digital certificates , wherein the 
authentication certificate is associated with the request to ensure the 
request is authenticated in accordance with the pre-defined authentication 
policy, the authentication of the request including verifying a digital 
signature incorporated in the req uest with a list of the digital certificate s 
previously defined as revoker certificates for a website ; 

sending the authorization certificate to the first party, wherein the first party to 

receive the authorization certificate the authorization certificate .including 
a r e voker certif i cate associated with the revok e r ; 

revoking the digital certificate digital certificate of the second party in 
accordance with a revocation policy; and 

initiating communication with the first party to indicate that the digital certificate 
has been revoked, wherein the communication includes notifying the first 
party that the digital certificate digital certificate of the second party has 
been revoked, wherein the notification is further sent to other parties 
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registering with the database as relying on the digital c e rtificate digital 
certificate of the second party of the second party. 

2. (Cancelled) 

3. (Currently Amended) The method of claim-SJ_, wherein initiating communication 
with the first party further comprises sending a revocation message to a machine 
that is associated with the first party. 

4. (Currently Amended) The method of claim 3 further comprising verifying 
authenticity of the revocation message and modifying access control information 
to indicate the revocation o f th e s e cond party's certificate certificate of the second 
party . 

5. (Currently Amended) The method of claim 1, wherein receiving the request to 
revoke the digital certificat e digital certificate of second party comprises 
accepting the request by authenticating a signature incorporated in the request 
with the revoker certificate. 

6. (Currently Amended) The method of claim 21 , further comprising sending an 
email message to an email address for the first party. 

Claims 7-10 (Cancelled) 

1 1 . (Currently Amended) A system comprising: 

a server having an integrated circuit coupled with a storage medium via a bus, the 

server further having a registration database to register a first party and a 

second party, wherein the first party is registered as a relying party for a 

digital certificate of the second party, the server to: 
receive a request to revoke the digital certificate of the second party after 

registering the first party; 
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authenticate the request in accordance with a pre-defined authenticating policy 
associated with the digital certificate of the second party, and generating 
an authorization certificate by a revoker of digital certificates , wherein the 
authentication certificate is associated with the request to ensure the 
request is authenticated in accordance with the pre-defined authentication 
policy, the authentication of the request including verifying a digital 
signature incorporated in the request with a list of the digital certificates 
previously defined as revoker certificates for a website ; 

send the authorization certificate to the first party , wherein the first party to 

receive the authorization certificate: , the authoriza tio n, certificate m ehKfeeg 
a r e vok eF-eertf ficate associate d with t he revoker 

revoke the digital certificate digital certificate of the second party in accordance 
with a revocation policy; and 

initiate communication to indicate to the first party that the digital certificat e 
digital certificate of the second party has been revoked, wherein the 
communication includes notifying the first party that the digital certificat e 
digital certificate of the second party has been revoked, wherein the 
notification is further sent to other parties registering with the database as 
relying on the digital certificate of the second party. 
Claims 12-25 (Cancelled) 

26. (Currently Amended) A machine-readable storage medium comprising 
instructions which, when executed, further cause a machine to: 
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register a first party and a second party with a database at a server, wherein the 
first party is registered as a party relying on a digital certificate of the 
second party; 

receive a request to revoke the digital certificate of the second party after 
registering the first party; 

authenticate the request in accordance with a pre-defined authenticating policy 
associated with the digital certificate of the second party, and generating 
an authorization certificate by a revoker of digital certificates , wherein the 
authentication certificate is associated with the request to ensure the 
request is authenticated in accordance with the pre-defined authentication 
policy, the authentication of the request including verifying a digital 
signature incorporated in the request with a list of the digital, certificates 
previously defined as revoker certificates for a website ; 

send the authorization certificate to the first party , wherein the first party to 

receive the authorization certificate , the authorization certificate including 
a re v o k er c er ti fi cat e associated w it h the r evo k e r; 

revoke the digital certificat e digital certificate of the second party in accordance 
with a revocation policy; and 

initiate communication with the first party to indicate that the digital certificat e 
digital certificate of the second party has been revoked, wherein the 
communication includes notifying the first party that the digital certificat e 
digital certificate of the second party has been revoked, wherein the 
notification is further sent to other parties registering with the database as 
relying on the digital certificate digital certificate of the second party . 
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27. (Cancelled) 

28. (Previously Presented) The machine-readable storage medium of claim 26, 
wherein initiating of the communication with the first party further comprises 
sending a revocation message to a machine that is associated with the first party. 

29. (Previously Presented) The machine-readable storage medium of claim 28, further 
comprising the machine associated with the first party verifying the authenticity 
of the revocation message and modifying access control information of the 

■ 

machine to indicate the revocation of the digital certificate. 

30. (Previously Presented) The machine-readable storage medium of claim 26, 
wherein receiving the request to revoke the digital certificate comprises accepting 
the request by authenticating a signature incorporated in the request the revoker 
certificate. 

3 1 . (Previously Presented) The machine-readable storage medium of claim 26, 
wherein the initiating of the communication with a first party further comprises 
sending an email message to an email address for the first party. 

32. (Cancelled) 

33. (Previously Presented) The system of claim 1 1 , wherein the server is further to 
send a revocation message to a machine that is associated with the first party. 

34: (Currently Amended) The system of claim^U, wherein the server is further to 
accept the request by authenticating a signature incorporated in the request with 
the revoker certificates certificate. 

35. (Previously Presented) The system of claim 1 1 , wherein the server is further to 
send an email message to an email address for the first party. 
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